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EXAMINER 
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PAPER NUMBER 



2437 

DATE MAILED: 03/16/2009 



APPLICATION NO. 


FILINCr DATE 


FIRST NAMED INVENTOR 


ATTORNEY DOCKET NO. 


CONFIRMATION NO. 


10/605,689 


10/17/2003 


James M. Doherty 


1033-T00534C 


2688 



TITLE OF INVENTION: INTRUSION DETECTION 



APPLN. TYPE 


SMALL ENTITY 


ISSUE FEE DUE 


PUBLICATION FEE DUE 


PREV. PAID ISSUE FEE 


TOTAL FEE(S) DUE 


DATE DUE 



nonprovisional NO $1510 $300 $0 $1810 06/16/2009 



THE APPLICATION IDENTIFIED ABOVE HAS BEEN EXAMINED AND IS ALLOWED FOR ISSUANCE AS A PATENT. 
PROSECUTION ON THE MERITS IS CLOSED . THIS NOTICE OF ALLOWANCE IS NOT A GRANT OF PATENT RICIITS. 
THIS APPLICATION IS SUBJECT TO WITHDRAWAL FROM ISSUE AT THE INITIATIVE OF THE OFFICE OR UPON 
PETITION BY THE APPLICANT. SEE 37 CFR 1,313 AND MPEP 1308, 

THE ISSUE FEE AND PUBLICATION FEE (IF REQUIRED) MUST BE PAID WITHIN THREE MONTHS FROM THE 
MAILING DATE OF THIS NOTICE OR THIS APPLICATION SHALL BE REGARDED AS ABANDONED. THIS 
STATUTORY PERIOD CANNOT BE EXTENDED . SEE 35 U.S.C. 151. THE ISSUE FEE DUE INDICATED ABOVE DOES 
NOT REFLECT A CREDIT FOR ANY PREVIOUSLY PAID ISSUE FEE IN THIS APPLICATION. IF AN ISSUE FEE HAS 
PREVIOUSLY BEEN PAID IN THIS APPLICATION (AS SHOWN ABOVE), THE RETURN OF PART B OF THIS FORM 
WILL BE CONSIDERED A REQUEST TO REAPPLY THE PREVIOUSLY PAID ISSUE FEE TOWARD THE ISSUE FEE NOW 
DUE. 



HOW TO REPLY TO THIS NOTICE: 



I. Review the SMALL ENTITY status shown above. 

If the SMALL ENTITY is shown as YES, verify your current 
SMALL ENTITY status: 

A. If the Status is the same, pay the TOTAL FEE(S) DUE shown 

above. 

B. If the status above is to be removed, check box 5b on Part B - 
Fee(s) Transmittal and pay the PUBLICATION FEE (if required) 
and twice the amount of the ISSUE FEE shown above, or 



If the SMALL ENTITY is shown as NO: 



A. Pay TOTAL FEE(S) DUE shown above, or 



B. If applicant claimed SMALL ENTITY status before, or is now 
claiming SMALL ENTITY status, check box 5a on Part B - Fee(s) 
Transmittal and pay the PUBLICATION FEE (if required) and 1/2 
the ISSUE FEE shown above. 



II. PART B - FEE(S) TRANSMITTAL, or its equivalent, must be completed and returned to the United States Patent and Trademark Office 
(USPTO) with your ISSUE FEE and PUBLICATION FEE (if required). If you are charging the fee(s) to your deposit account, section "4b" 
of Part B - Fee(s) Transmittal should be completed and an extra copy of the form should be submitted. If an equivalent of Part B is filed, a 
request to reapply a previously paid issue fee must be clearly made, and delays in processing may occur due to the difficulty in recognizing 
the paper as an equivalent of Part B. 

III. All communications regarding this appUcation must give the application number. Please direct all communications prior to issuance to 
Mail Stop ISSUE FEE unless advised to the contrary. 

IMPORTANT REMINDER: Utility patents issuing on applications filed on or after Dec. 12, 1980 may require payment of 
maintenance fees. It is patentee's responsibility to ensure timely payment of maintenance fees when due. 
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PART B - FEE(S) TRANSMITTAL 
Complete and send this form, together with applicable fee(s), to: Mail 



MaU Stop ISSUE FEE 
Commissioner for Patents 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
or Fax (571)-273-2885 



INSTRUCTIONS: This form should be used for transmitting the ISSUE FEE and PUBLICATION FEE (if required). Blocks I through 5 should be completed where 
appropriate. All further correspondence including the Patent, advance orders and notification of maintenance fees will be mailed to the current correspondence address as 
indicated unless corrected below or directed otherwise in Block I, by (a) specifying a new correspondence address; and/or (b) indicating a separate "FEE ADDRESS" for 
maintenance fee notifications. 



CURRENT CORRESPONDENCE ADDRESS (Note: Use Block 1 for any change of address) 



60533 7590 

TOLER LAW GROUP 
8500 BLUFFSTONE COVE 
SUITE A201 
AUSTIN, TX 78759 



03/16/2009 



Note: A certificate of mailing can only be used for domestic mailings of the 
Fee(s) Transmittal. This certificate cannot be used for any other accompanying 

Eapers. Each additional paper, such as an assignment or formal drawing, must 
ave its own certificate of mailing or transmission. 

Certificate of Mailing or Transmission 
I hereby certify that this Fee(s} Transmittal is being deposited with the United 
States Postal Service with sufficient postage for first class mail in an envelope 
addressed to the Mail Stop ISST^F FEE address above, or Ix'ing facsimile 
transmillod lo Iho I Sl'IX) 1.^71 ) 27.V288.^. on Ihc dale indicalod Ixdow. 



(Depositor's name) 



(Signature) 
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I . ( hangc of correspondence address or indication of "Fee Address" (37 

CFR 1.363J. 

Q Change of correspondence addiess (or Change of Correspondence 
Address lonn PTO/SB/122) attached. 

Q "f ee Address" indication (or "Fee Address" Indication form 
PTO/SB/47; Rev 03-02 or more recent) attached. Use of a Customer 
Number is required. 



2. For printing on the patent front page, Ust 

(1) the names of up to 3 registered patent attorneys 
or agents OR, alternatively, 

(2) the name of a single firm (having as a member a 
registered attorney or agent) and the names of up to 
2 registered patent attorneys or agents. If no name is 
listed, no name will be printed. 



3. ASSIGNEE NAME AND RESIDENCE DATA TO BE PRINTED ON THE PATENT (print or type) 

PLEASE NOTE: Unless an assignee is identified below, no assignee data will appear on the patent. If an assignee is identified below, the document has been filed for 
recordation as set forth in 37 CFR 3.11. Completion of this form is NOT a substitute for filing an assignment. 



(A) NAME OF ASSIGNEE 



(B) RESIDENCE: (CITY and STATE OR COUNTRY) 



Please check the appropriate assignee category or categories (will not be printed on the patent) : Q Individual Q Corporation or other private group entity O Government 

4a. The following fee(s) are submitted: 4b. Payment of Fee(s): (Please first reapply any previously paid issue fee sliown above) 

Q Issue Fee A check is enclosed. 

Q PubUcation Fee (No small entity discount permitted) ^ Payment by credit card. Form PTO-2038 is attached. 

Advance Oixler - # c^fCc^pies Q The Direetor is hereb\" authorized lo eharge the required feefs). any deficiency, or credit any 

o\ er|")aN me ill. lo l)e|")osii Aeeoiiiil Niiiiiher Telle lose an extra eo[")y oi" this iorm). 

5. Change in Entity Status (from status indicated above) 

□ a. Apphcant claims SMALL ENTITY status. See 37 CFR 1.27. □ b. Applicant is no longer claiming SMALL ENTITY status. See 37 CFR 1.27(g)(2). 

NOTE: The Issue Fee and Pubhcation Fee (if required) will not be accepted from anyone other than the applicant; a registered attorney or agent; or the assignee or other party in 
interest as shown by the records of the United States Patent and Trademark Office. 



Authorized Signature Date _ 



Typed or printed name Registration No. 



This collection of information is required by 37 CFR 1.31 1. The information is required to obtain or retain a benefit by the public which is to file (and by the USPTO to process) 
an apphcation. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 ininutes to complete, including gathering, preparmg, and 
submitting the completed application form to the USPTO. Time will vaiy depending upon the individual case. Any comments on the amount of time you require to complete 
this form and/or suggestions for reducing this burden, should be sent to the Chief Information Officer, U.S. Patent and Trademark Office, U.S. Department of Commerce, P.O. 
Box 1450, Alexandria, Virginia 22313-1450. DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Commissioner for Patents, P.O. Box 1450, 
Alexandria, Virginia 22313-1450. 

Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number. 
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Determination of Patent Term Adjustment under 35 U.S.C. 154 (b) 

(application filed on or after May 29, 2000) 

The Patent Term Adjustment to date is 797 day(s). If the issue fee is paid on the date that is three months after the 
mailing date of this notice and the patent issues on the Tuesday before the date that is 28 weeks (six and a half 
months) after the mailing date of this notice, the Patent Term Adjustment will be 797 day(s). 

If a Continued Prosecution Application (CPA) was filed in the above-identified application, the filing date that 
determines Patent Term Adjustment is the filing date of the most recent CPA. 

Applicant will be able to obtain more detailed information by accessing the Patent Application Information Retrieval 
(PAIR) WEB site (http://pair.uspto.gov). 

Any questions regarding the Patent Term Extension or Adjustment determination should be directed to the Office of 

Patent Legal Administration at (57])-272-7702. Questions relating to issue and publication fee payments should be 
directed to the Customer Service Center of the Office of Patent Publication at l-(888)-786-0101 or 
(571)-272-4200. 
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Notice of Allowability 


Application No. 
10/605,689 


Applicant(s) 

DOHERTY ET AL. 


Examiner 

TECHANE J. GERGISO 


Art Unit 

2437 





~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address— 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1 308. 

1 . ^ This communication is responsive to 10/09/2008 . 

2. ^ The allowed claim(s) is/are 1.2.4-16 and 18-25 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)n All b)nSome* c) □ None of the: 

1. n Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) O including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) O including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying Indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 

1 . M Notice of References Cited (PTO-892) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 

3. □ Information Disclosure Statements (PTO/SB/08), 

Paper No./Mail Date 

4. O Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 



5. □ Notice of Informal Patent Application 

6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. S Examiner's Amendment/Comment 

8. ^ Examiner's Statement of Reasons for Allowance 

9. □ Other . 
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Notice of Allowability 



Part of Paper No./Mail Date 20090305 



Application/Control Number: 1 0/605 ,689 Page 2 

Art Unit: 2437 

DETAILED ACTION 

1. This is a notice of allowance in response to the appellant's communication filed on 
December 09, 2008. 

EXAMINER'S AMENDMENT 

2. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

3. Authorization for this examiner's amendment was given in a telephone interview with 
Ray Salvagio Reg. No.: 59,983 on March 5, 2008. The application has been amended as follows: 

In claim 1 : line 4, replace "via" with ~by~. 

In claim 1: line 10; claim 10: line 16; claim 18: line 21; replace "state." with —state; wherein the 
command limits the access to a single user and the access is physical to an interface of 
the host computer.--. 



In claim 15: line 10, replace "medium" with —storage medium.—, 
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In claim 15: line 15, replace "signature" with —signature; wherein the command limits the access 
to a single user and the access is physical to an interface of the host computer.--. 

Reason for allowance 

4. After consideration of the appellant's argument filed on December 09, 2008 in response 
to the Office Action mailed on August 06, 2008, and through examination of claims 1-2, 4-16, 
and 18-25 with respect to the prior art (Moran and Rowland) during the appeal conference and 
proposed examiner's amendment, claims 1-2, 4-16, and 18-25 have been found in condition for 
allowance over prior arts of record. 

5. The following is an examiner's statement of reasons for allowance: 

Claims 1, 10, 15 and 18 include the following features which are not taught or fiirther 
suggested and would not have been obvious over prior arts of record and these features are: 
identifying a possible intrusion in a host and issuing a command to an operating system of said 
host to bring said host to a single user state wherein the command limits the access to a single 
user and the access is physical to an interface of the host computer. 

The examiner considered and gave patentable weight for "a single user state" in light the 
applicant's disclosure as described in paragraph 0017 filed on February 23, 2004 which is " once 
an intrusion is detected an INIT 1 command is issued to the host system down to a single user 
state, whereby the INIT 1 command limits the access to a single user and the access is physical 
to the interface". 
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Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See the notice of reference cited in form PTO-892 for additional prior art. 

Contact Information 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Techane J. Gergiso whose telephone number is (571) 272-3784 
and fax number is :2^3»3784. The examiner can normally be reached on 9:00am - 6:00pm. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

/Techane J. Gergiso/ 

Examiner, Art Unit 2437 



/Matthew B Smithers/ 

Primary Examiner, Art Unit 2437 



